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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for generating an authentication rating for 
an entity, comprising: 

receiving a message identifying an entity, which message requires authentication 
of said entity; 

receiving data from each of a plurality of sources, said data representing at least 
a rating for said authentication according to a criteria; 

analysing said received data using a set of predefined fuzzy inferencing rules so 
as to calculate an authentication rating for said entity; ont i ty 

said plurality of sources including a local store arranged in operation to store 
previous authentication ratings for a plurality of entities, and said analysis step involving 
combining previous authentication ratings for said entity with one or more current 
authentication ratings for said entity. 

2. (Original) A method according to claim 1 , wherein said data from each 
source comprise data representing a trust rating for said entity and data representing an 
associated confidence rating. 
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3. (Original) A method according to claim 2, wherein the analysis comprises: 

combining said plurality of data representing a trust rating using a first predefined 
set of fuzzy inferencing rules so as to calculate a combined trust rating; 

combining said plurality of confidence rating data using a second predefined set 
of fuzzy inferencing rules to calculate a combined confidence rating; 

and then analysing said combined trust rating and said combined confidence 
rating using a third predefined set of fuzzy inferencing rules so as to calculate said 
authentication rating. 

Claim 4 (Canceled). 

5. (Currently Amended) A system for generating an authentication rating for 
an entity, comprising: 

receiving means for receiving a message identifying an entity, which message 
requires identification of said entity; 

the receiving means being further arranged to receive in use from each of a 
plurality of sources data representing a rating of said entity according to a criteria; and 
processing means arranged in use to analyse said received data using a set of 
predefined fuzzy inferencing rules so as to calculate an authentication rating for said 
entity; ont i ty. 

said plurality of sources including a local store arranged in operation to store 
previous authentication ratings for a plurality of entities, and said processing means 
being arranged to calculate an authentication rating for said entity by combining 
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previous authentication ratings for said entity with one or more current authentication 
ratings for said entity. 

6. (Currently Amended) A system according to claim 5, said processing 
means being further arranged to compare said authentication rating with a predefined 
policy so as to determine whether to issue i ssue, an authenticate signal, signal. • 

7. (Currently Amended) A computer readable storage medium containing a 
computer program or suite of programs executable by a computer system to cause the 
system to perform the method of claim 1 . 

Claims 8 and 9 (Canceled). 

10. (New) A computer readable storage medium containing a computer 
program or suite of programs executable by a computer system to cause the system to 
perform the method of claim 2. 

1 1 . (New) A computer readable storage medium containing a computer 
program or suite of programs executable by a computer system to cause the system to 
perform the method of claim 3. 
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